CVE-2009-3565 Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) before 5.1.11.6 allow remote attackers to inject arbitrary we...
MediumCVSS 4.3
EPSS 2.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the (1) iaction or (2) node parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee intrushield network security manager | <= 5.1.7.74 | No fix listed |
| mcafee intrushield network security manager | = 5.1.7.7 | No fix listed |
| mcafee intrushield network security manager | = 5.1.7.73 | No fix listed |
References
- kc.mcafee.com vendor-advisory
- 37178 third-party-advisory vendor-advisory
- 1023171 vdb-entry
- 59911 vdb-entry
- www.secureworks.com
- 20091111 [SWRX-2009-001] McAfee Network Security Manager Cross-Site Scripting (XSS) Vulnerability mailing-list
- 37003 exploit vdb-entry
- ADV-2009-3226 vdb-entry vendor-advisory
- nsm-login-xss(54250) vdb-entry